U.S. regulatory frameworks for protecting critical infrastructure from cyber attacks

Cyber Terrorism

Cybersecurity has emerged as one of the important components of modern security initiatives because of rapid advancements of technology and the Internet. Ensuring cybersecurity has become important because of the vulnerabilities of critical infrastructures to cyber attacks in the aftermath of the 9/11 terror attacks. As part of efforts to enhance cybersecurity, federal and state governments in the United States have enacted laws that define the role of various stakeholders in protecting the nation's critical infrastructures. These laws govern the responsibilities of companies and organizations in protecting themselves and customers. In addition, these regulations have some costs associated with them given that enhancing cybersecurity is a relatively complex process.

Organizations' Role in Protecting Themselves and Customers

As cyber attacks continue to increase in the recent past, the federal government has enacted laws and policies to govern the role of organizations in protecting themselves and customers. Based on the executive order signed by President Obama in 2015, organizations need to establish cybersecurity infrastructures that prevent unauthorized acquisition or access to electronic data that comprises personal information (Heilbrun & Brown, 2011). Secondly, organizations are required to inform those affected by any data breach and the Federal Trade Commission within 48 hours after the occurrence of such an incidence. If the data breach affects at least 5,000 individuals, organizations are required to notify the major credit reporting bodies. The executive order expanded the powers and authority of the Federal Trade Commission to penalize organizations or businesses for any failure to respond to theft and/or unauthorized access of personal information in a responsible and timely manner. Therefore, the role of organizations in protecting themselves and customers based on U.S. laws on cybersecurity involves preventing unauthorized access and notify relevant stakeholders of any data breaches.

Costs of Regulations

There are various costs relating to these cybersecurity regulations, which are necessary for effective implementation of the laws. The costs of these regulations include transaction costs, coordination costs, and monitoring costs for implementing software and other critical infrastructures for cybersecurity (Schwalb, 2006). However, these costs are minimal as compared to the financial implications brought by occurrence of data breaches.

In conclusion, cybersecurity remains a crucial component of modern security infrastructure to an extent that laws have been established to promote cybersecurity. These laws define the responsibilities and roles of companies in protecting themselves and customers such as enhance information sharing, preventing identity theft, adoption of secure systems and technologies, and providing free monitoring and resolution of data breaches. These regulations are associated with some costs like monitoring, coordination, and transaction costs.